$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft File: A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft (raw, json) Hash identifier: C8P4aq6rnjzZMmk5MGs7a1Yq8VG604LVaectNqf7rG8= Subject key identifier: 3D:3D:97:E2:0F:63:D3:AD:A2:C5:6D:B8:91:B4:CF:33:5B:37:31:DB Authority key identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 Certificate issuer: /CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Certificate serial: 4573747041EF81A42179E863EFDF5F7A4A224360 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft Manifest number: 1B Signing time: Thu 24 Apr 2025 07:51:15 +0000 Manifest this update: Thu 24 Apr 2025 07:46:15 +0000 Manifest next update: Sun 27 Apr 2025 18:25:15 +0000 Files and hashes: 1: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: fAL9MfqpRcilmiK6cDbN2CreeawZppTYa6tvP1zgN7Y=) 2: A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl (hash: DjG5I8R4vewS4YZHz9qlDejuLomRR/1tTE5d1PvUMQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:73:74:70:41:ef:81:a4:21:79:e8:63:ef:df:5f:7a:4a:22:43:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Validity Not Before: Apr 24 07:46:15 2025 GMT Not After : Apr 27 18:25:15 2025 GMT Subject: CN=3D3D97E20F63D3ADA2C56DB891B4CF335B3731DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:3b:0c:67:63:63:76:e7:80:8f:a0:4f:8e: 20:36:05:4c:d9:fe:4e:6f:75:29:8b:20:21:47:dc: fc:82:f7:bb:af:3a:99:3c:49:6b:c6:be:cd:1d:b3: 7c:01:03:d2:ce:cf:08:e2:ea:3d:d7:47:ee:6d:40: 9e:c9:56:ae:ae:00:52:70:1c:ce:cc:2b:78:07:e3: cc:d6:84:01:05:a4:b3:2a:36:02:45:89:b8:95:95: 7c:8e:93:61:94:aa:cd:7d:05:ea:ac:5b:82:6a:dd: 94:c9:a9:09:b0:2a:08:f0:2e:50:56:fb:a9:4e:67: 15:7e:73:f8:4d:3b:60:40:60:e1:7e:86:39:9b:e7: e9:e6:12:82:01:05:17:3e:09:a9:2d:99:3a:55:7a: 41:f5:85:b5:aa:29:c7:a6:e1:de:9f:b9:cc:ca:24: 47:c8:83:99:ff:f4:a0:21:d5:73:5c:5c:5c:bb:54: 7c:dd:00:9d:75:10:2a:99:dc:74:12:86:f8:50:30: 5e:d1:1c:28:58:7d:42:b0:d5:b1:f7:02:fa:88:2b: 39:58:46:47:6e:a5:8b:f8:b2:2b:9a:80:e2:76:af: e5:52:ed:d8:43:28:3a:25:d2:48:a8:24:d9:b6:19: 4c:01:4a:81:78:b6:e2:d2:15:e0:73:84:b8:fb:a3: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3D:97:E2:0F:63:D3:AD:A2:C5:6D:B8:91:B4:CF:33:5B:37:31:DB X509v3 Authority Key Identifier: keyid:A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:83:54:6c:f7:bc:0f:8d:4a:7c:59:43:34:00:d1:76:a6:7b: 36:a6:e3:76:f0:4d:b3:7d:ad:b5:ad:85:66:40:3a:18:b7:8e: 98:24:b9:96:71:4a:c5:90:1f:f9:76:e0:fe:96:88:90:5f:00: 1d:fe:df:c6:ec:38:cc:99:79:50:64:64:cc:47:6a:5c:4e:a6: 6a:1d:5e:86:ae:25:75:55:dc:6b:df:cf:5e:0d:52:2e:72:3c: e6:5c:e6:22:96:13:e9:ab:5d:54:f3:36:70:55:26:e5:d1:54: 9d:ea:f3:c5:86:b5:0b:81:70:a3:fb:c9:0d:63:fe:35:c4:66: ed:47:f5:61:31:e0:51:03:19:e4:90:d2:dc:2e:2f:c4:1b:ba: fb:31:01:ab:c7:f2:85:d8:4e:55:9e:43:42:01:7f:4f:cc:9b: 8a:7a:36:9c:e3:04:4d:13:20:e7:e8:df:e8:7b:d9:4b:8a:a4: 60:69:be:07:e2:78:a6:35:eb:1f:6b:17:39:8f:a9:c7:d8:36: f9:1e:e5:2c:c8:4e:3c:dc:67:12:51:7e:a4:99:4b:5f:26:37: 4d:35:50:b0:3c:ff:b6:39:35:6c:d5:4e:77:1c:b6:00:27:f3: 39:4f:b6:3a:fa:52:8b:00:71:fb:00:84:02:14:ac:12:db:4b: 43:1d:20:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXN0cEHvgaQheehj799fekoiQ2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1 NzBFRDNBNDAeFw0yNTA0MjQwNzQ2MTVaFw0yNTA0MjcxODI1MTVaMDMxMTAvBgNV BAMTKDNEM0Q5N0UyMEY2M0QzQURBMkM1NkRCODkxQjRDRjMzNUIzNzMxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPzsMZ2NjdueAj6BPjiA2BUzZ /k5vdSmLICFH3PyC97uvOpk8SWvGvs0ds3wBA9LOzwji6j3XR+5tQJ7JVq6uAFJw HM7MK3gH48zWhAEFpLMqNgJFibiVlXyOk2GUqs19BeqsW4Jq3ZTJqQmwKgjwLlBW +6lOZxV+c/hNO2BAYOF+hjmb5+nmEoIBBRc+CaktmTpVekH1hbWqKcem4d6fuczK JEfIg5n/9KAh1XNcXFy7VHzdAJ11ECqZ3HQShvhQMF7RHChYfUKw1bH3AvqIKzlY RkdupYv4siuagOJ2r+VS7dhDKDol0kioJNm2GUwBSoF4tuLSFeBzhLj7ozrRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPT2X4g9j062ixW24kbTPM1s3MdswHwYDVR0j BBgwFoAUohunDfjuRw/npgOFtmU4QlcO06QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMS9BMjFCQTcwREY4 RUU0NzBGRTdBNjAzODVCNjY1Mzg0MjU3MEVEM0E0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1NzBF RDNBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4 NDI1NzBFRDNBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGDVGz3vA+NSnxZQzQA0Xamezam43bwTbN9 rbWthWZAOhi3jpgkuZZxSsWQH/l24P6WiJBfAB3+38bsOMyZeVBkZMxHalxOpmod XoauJXVV3Gvfz14NUi5yPOZc5iKWE+mrXVTzNnBVJuXRVJ3q88WGtQuBcKP7yQ1j /jXEZu1H9WEx4FEDGeSQ0twuL8QbuvsxAavH8oXYTlWeQ0IBf0/Mm4p6NpzjBE0T IOfo3+h72UuKpGBpvgfieKY16x9rFzmPqcfYNvke5SzITjzcZxJRfqSZS18mN001 ULA8/7Y5NWzVTncctgAn8zlPtjr6UosAcfsAhAIUrBLbS0MdIL0= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net